Manager of Cyber Security Services

About the role

The IT Manager, Cyber Security Services leads cybersecurity operations, risk management, compliance initiatives, and enterprise security programs. The role involves protecting critical systems and infrastructure, strengthening the organization's cybersecurity posture, and ensuring compliance with industry standards and regulatory requirements.

Responsibilities

• Develop, implement, and maintain cybersecurity policies, standards, and procedures based on industry best practices.

• Lead the organization's cybersecurity strategy using a risk-based approach.

• Drive adoption and ongoing maturity of the NIST Cybersecurity Framework.

• Monitor emerging cyber threats, vulnerabilities, and industry trends to improve security readiness.

• Partner with technology and business leaders to identify, assess, and mitigate security risks.

• Manage and optimize security technologies, including endpoint protection, vulnerability management, log aggregation, and security monitoring tools.

• Monitor network activity and investigate indicators of compromise or malicious activity.

• Lead incident response efforts, forensic investigations, and remediation activities.

• Evaluate potential security breaches and coordinate timely response and corrective actions.

• Ensure security controls remain effective and aligned with evolving threats.

• Conduct enterprise-wide risk assessments and security reviews.

• Ensure compliance with applicable security, privacy, and regulatory requirements.

• Lead internal and external audit activities, including SOC and PCI-related initiatives.

• Monitor adherence to established security policies and standards.

• Develop recommendations for improving security controls and compliance readiness.

• Provide leadership, mentoring, and guidance to technical teams and stakeholders.

• Deliver security awareness training and promote a culture of cybersecurity across the organization.

• Manage relationships with security vendors, consultants, and service providers.

• Participate in technology procurement reviews to ensure security requirements are incorporated early in the process.

• Support departmental budget planning and capital expenditure initiatives.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

• 10+ years of experience in Information Technology, Cybersecurity, or Information Security.

• 5+ years of experience in a leadership capacity, including Manager, Supervisor, Team Lead, Security Lead, or similar role.

• Strong knowledge of cybersecurity principles, risk management, and security best practices.

• Experience developing and implementing security policies, procedures, and governance frameworks.

• Experience conducting risk assessments, vulnerability management, and incident response activities.

• Demonstrated network engineering and infrastructure security experience.

• Strong project management and organizational skills.

• Excellent verbal and written communication skills with the ability to present technical concepts to leadership and non-technical audiences.

• Ability to manage multiple priorities and work effectively in a fast-paced environment.

Preferred Qualifications

• One or more of the following certifications:

  • CISSP (Certified Information Systems Security Professional)
  • CISM (Certified Information Security Manager)
  • CompTIA Security+
  • GIAC Certifications
  • Other advanced cybersecurity certifications

• Experience with several of the following technologies and disciplines:

  • Windows security administration and architecture
  • Security monitoring and SIEM platforms
  • Endpoint Detection & Response (EDR) solutions
  • Vulnerability assessment and management tools
  • Log aggregation and analysis platforms
  • Network traffic monitoring and analysis tools
  • Application security design, testing, and assessment
  • Internet of Things (IoT) and Operational Technology (OT) security
  • Physical security systems, access control, and video surveillance platforms
  • Enterprise cybersecurity toolsets and security technologies

• Experience with:

  • NIST Cybersecurity Framework
  • ISO 27001
  • COBIT
  • OWASP
  • ITIL
  • SANS
  • HIPAA

Benefits

Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.